xecloud.duckdns.org
Categoria: Phishing
Para usar o produto com todas as funcionalidades, tem de adquirir uma licença do Combo Cleaner. Está disponível um teste gratuito limitado de sete dias. O Combo Cleaner é propriedade e operado pela RCS LT, a empresa-mãe do PCRisk.com.
Descrição de xecloud.duckdns.org
xecloud.duckdns.org appears to be a subdomain hosted under DuckDNS, a dynamic DNS platform commonly used to expose home or small-office devices and services to the internet. Based on the screenshot, the page presents an AT&T-branded "Password Required" login form asking for a username and device password, which suggests it may be attempting to imitate a router, gateway, or device-management portal rather than functioning as a general public website.
The domain itself is not a standalone commercial domain but a third-level hostname under duckdns.org, which can make attribution less clear because such subdomains are typically user-created. The visible content appears focused on credential entry rather than information, services, or normal navigation, and the page branding references AT&T and ARRIS intellectual property. Based on the available page content and classification data, this site appears to fit a phishing-oriented login portal rather than a legitimate technology information site.
Avaliação de segurança de xecloud.duckdns.org
Multiple independent signals indicate elevated risk at the time of this scan. The domain was flagged by 21 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, major threat-database checks showed the URL listed for social-engineering activity, which is a stronger warning sign than a generic heuristic match. Although one malware scan reported no malicious files, that result does not outweigh the broader phishing-related consensus because credential-harvesting pages often contain little or no downloadable malware.
The screenshot also raises concern because it shows an AT&T-branded credential prompt on a DuckDNS subdomain rather than on an official-looking provider domain. That mismatch may indicate an attempt to collect usernames and device passwords by imitating a telecom or router login page. The domain's IP address is also listed on one mail-reputation blocklist, which is a secondary cautionary signal, though less important than the phishing detections and social-engineering listing.
Based on these findings, this website may pose potential risks to visitors.
Descrição técnica
The site appears to be hosted on IP address 76.198.154.67, associated here with AT&T Corp in Atlanta, United States. The hostname is a DuckDNS subdomain, which suggests dynamic DNS usage rather than a conventional business-hosted web property. The web server software was not identified in the scan results.
TLS/SSL appears to be invalid or missing, which is a notable concern for any page requesting credentials. DNSSEC is unsigned, so DNS responses do not appear to benefit from DNSSEC validation at the time of this scan. Combined with the credential-entry page and the phishing-related detections, the technical profile does not provide reassuring trust signals.
Partilhe a sua experiência com este website. Era seguro? Encontrou algum problema?